Skip to content

zhaoboy9692/movecert

 
 

Repository files navigation

Copy Certificates

Description

Copies certificates from the user certificate store into the system store. Also removes the Network may be monitored warning.

Note that this is a significant change from the historical use of this module. By copying, instead of moving, the Certificate Transparency problem for proxying Google Chrome has been solved. See notes and links in the changelog below for more details on this.

Changelog

v2.0.2

  • support Android 14

v2.0.1

  • Updated install messages
  • Fixed the release binary. I'd previously accidentally included the entire .git repository in the installer zip. Whoopsie. Down to 8KB when I had it at 80KB before.

v2.0

  • Changed behavior to copy instead of moving the certificate.
    • The certificate ends up in two locations, one in the User store and one in the System store. This addresses the Chrome Certificate Transparency problem discussed here and here. Note that enabling Zygisk and adding Chrome to the DenyList is required for this to work.
  • Fixed install issue in Magisk, where this module would not install correctly. Credit to azio7.

v1.9

  • Dynamically determine correct SELinux context for cert from device itself.
  • AdGuard users may need to reinstall their HTTPS filtering certificate.

v1.8

  • Merged pull request: Fix SELinux contexts

v1.7

  • Merged pull request: Prevent placeholder from being moved to system store
  • Merged pull request: System store certs should be owned by user and group root

v1.6

  • Updated to newest module installer template

v1.5

  • Updated module template to 17000

v1.4

  • Remove unnecessary placeholders

v1.3

  • Create system store module directory instead of mkdir command

v1.2

  • Create system store directory if it does not already exist

v1.1

  • Added more info to README

v1

  • Initial release

Notes

If for some reason you do not want all your certificates moved from the user store to the system store, you can specify which certificate to move in /common/post-fs-data.sh by replacing the * with the name of the certificate; i.e.,

mv -f /data/misc/user/0/cacerts-added/12abc345.0 $MODDIR/system/etc/security/cacerts

Releases

No releases published

Packages

No packages published

Languages

  • Shell 100.0%